A directory traversal vulnerability was found in the ClairCore engine of Clair

A flaw was found in Red Hat Quay, where it has a persistent Cross-site Scripting (XSS) vulnerability when displaying a repository's notification

Mirror-registry: remote code execution using pickle deserialization

A privilege escalation flaw was found in Podman

A vulnerability was discovered in all quay-2 versions before quay-3.0.0, in the Quay web GUI where POST requests include a specific parameter which is used as a CSRF token

Quay: unauthenticated secscan notification endpoint in quay when psk is unset

Quay: red hat quay: authentication bypass allows privileged actions without valid credentials

Axios: Credential Theft and Response Hijacking via Prototype Pollution Gadget in Config Merge

Quay: unauthenticated exported logs download in quay

Quay: stripe webhook accepts forged events without signature verification in quay

A flaw was found in python

Some HTTP/2 implementations are vulnerable to a flood of empty frames, potentially leading to a denial of service

Some HTTP/2 implementations are vulnerable to unconstrained interal data buffering, potentially leading to a denial of service

Some HTTP/2 implementations are vulnerable to a settings flood, potentially leading to a denial of service

Some HTTP/2 implementations are vulnerable to a reset flood, potentially leading to a denial of service

Some HTTP/2 implementations are vulnerable to resource loops, potentially leading to a denial of service

Some HTTP/2 implementations are vulnerable to window size manipulation and stream prioritization manipulation, potentially leading to a denial of service

Mirror-registry: quay: insecure direct object reference in blobupload

Quay: ssrf via build archive_url in quay build api

A flaw was found in Keystone

Quay: ldap referral filter injection in quay external ldap authentication

Mirror-registry: quay: quay: server-side request forgery via log export functionality

A flaw was found in Quay

A flaw was found in Quay

Some HTTP/2 implementations are vulnerable to a header leak, potentially leading to a denial of service

A flaw was found in the way Red Hat Quay stores robot account tokens in plain text

A vulnerability was found in quay-2, where a stored XSS vulnerability has been found in the super user function of quay

Mirror-registry: quay: server-side request forgery in proxy cache upstream registry configuration

Quay: jwt claim validation bypasses in quay federated robot and sso authentication

A flaw was found in mirror-registry where an authenticated user can trick the system into accessing unintended internal or restricted systems by providing malicious web addresses

A flaw was found in the Quay registry

A vulnerability was found in Quay, which allows successful authentication even when a truncated password version is provided

Quay: repository notification uuid idor in quay api

A flaw was found in Quay

A flaw was found in Red Hat Quay, where it does not properly protect the authorization token when authorizing email addresses for repository email notifications

An information disclosure vulnerability was found in Red Hat Quay in versions before 3.3.1

A vulnerability was found in Quay

A vulnerability was found in the Quay web application